Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
File:                     HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft (raw, json)
Hash identifier:          DZ6kafD1RnA5jmmq6249uWm0XuAUNq15Lr5q1o0n+fM=
Subject key identifier:   B1:A2:DB:66:B8:62:46:EE:FE:6C:42:9F:E0:33:F9:2B:75:66:B3:E1
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Certificate issuer:       /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial:       019E2A392FE0480450971529CD83D76982C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
Manifest number:          1915
Signing time:             Fri 15 May 2026 06:00:51 +0000
Manifest this update:     Fri 15 May 2026 06:00:51 +0000
Manifest next update:     Sat 16 May 2026 06:00:51 +0000
Files and hashes:         1: 1XzbCZ6yY8fKoxvI53eQ_YxAoE8.roa (hash: 2cHGvx3rw1zFTiwFmSKRPxp+Yh74QRl9au/Y2339KsI=)
                          2: Eb64F3v1oYAj-E_RQC6TCD6A0Qo.roa (hash: 5S7unqujHWRwDHCe4gkQrhEC290D97kkFboUxzuHNTk=)
                          3: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl (hash: oDuxG+RfJTjR4OP1vO5YdYOXtgFcVlceDgPY9i0uHPA=)
                          4: I5oIKyc-Nnsg2P5sBEZFMHv808I.roa (hash: A5np8yhL8kgzony1w/u2xXkkcbdyP8sEVHMrTdXVIdE=)
                          5: W__alkBuZRj8gzkXd-vzfVbHK2Q.roa (hash: 0kBZjg6sW5SXO3x1fTOof+1+5GjGHO22pAAtjoqsY2Q=)
                          6: cPf8LTmHuQNpFCebW57DX4X7lVg.roa (hash: EC/kmKIvEJeWcU36Llbivi0e5yeWXS5Hz9Nq+HvVB00=)
                          7: hmZ1mxVrzqjqx_1iP5op4hU25Ho.roa (hash: pfSMpgk/ODrUlGox+4Mj+0AxVVPVgzj1yETRt0uvYPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:39:2f:e0:48:04:50:97:15:29:cd:83:d7:69:82:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
        Validity
            Not Before: May 15 06:00:51 2026 GMT
            Not After : May 16 06:00:51 2026 GMT
        Subject: CN=b1a2db66b86246eefe6c429fe033f92b7566b3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:85:10:4a:d3:84:1e:01:fa:ed:f3:7c:f4:
                    81:21:ee:b7:9a:7d:66:b5:55:6f:88:dd:ff:20:c3:
                    e8:0f:f2:37:0c:81:d9:e0:52:fb:c1:da:83:35:bd:
                    2f:d6:25:18:e8:c1:a0:8d:68:4b:70:c6:79:96:eb:
                    ef:7a:bd:37:a3:d0:79:aa:91:79:3e:0e:4f:c4:f8:
                    70:b3:7b:d5:a9:22:19:e1:92:6e:82:33:9c:c2:98:
                    70:e8:bd:89:8e:46:18:df:5e:b2:e1:e1:78:e6:35:
                    cd:5d:56:9c:ba:0d:d0:6e:c3:a8:8d:c0:16:f8:c2:
                    88:67:75:fa:42:9b:21:0c:4b:ad:87:2a:d7:0d:53:
                    b0:a3:fb:0f:e2:86:9e:89:11:e8:b1:2d:61:aa:07:
                    ff:db:4c:5a:4f:7c:c7:01:23:c7:a3:20:ff:cf:40:
                    52:5a:ef:a8:72:b6:f2:b1:34:61:31:1f:9d:6c:36:
                    5c:f4:7e:c1:04:29:6d:26:92:67:16:b5:48:d4:40:
                    1e:cf:97:10:3a:fc:da:a9:6f:1f:91:f4:f3:89:18:
                    0a:c9:f2:1b:8a:18:3d:13:67:ce:a8:a1:a9:61:e6:
                    2b:4a:a2:a5:bc:8f:f1:2e:28:d7:45:08:cf:20:eb:
                    d4:bc:09:7d:0b:99:57:ad:c3:78:32:88:8f:a5:16:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A2:DB:66:B8:62:46:EE:FE:6C:42:9F:E0:33:F9:2B:75:66:B3:E1
            X509v3 Authority Key Identifier:
                keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:6d:e8:b2:11:1f:13:a2:85:d6:5a:28:ac:89:b1:11:c5:
         23:fd:9c:f3:84:ba:0b:ad:89:1e:4c:4f:5f:7a:46:7f:d4:f0:
         39:b2:99:20:55:f1:14:99:49:8f:54:bb:3b:74:25:8a:53:a3:
         00:0d:dc:a7:da:db:6f:d8:3f:bb:10:f8:0d:26:63:24:b2:ce:
         16:3e:a6:f0:09:e8:0b:d9:26:cc:68:68:40:84:bb:6f:86:75:
         56:9d:98:bf:a1:98:3e:43:73:86:69:50:ee:65:b0:c7:e6:83:
         1a:6d:86:08:15:10:8b:8d:20:f2:5c:34:c2:2b:cd:06:44:6a:
         ed:ba:82:4b:26:e0:7e:c4:92:2e:ff:7f:7a:b0:90:4e:41:d5:
         8d:cb:4d:43:52:0c:98:e7:75:e7:bf:d0:6b:a6:1c:2b:7c:fa:
         6d:57:4e:ae:64:ac:3f:61:f4:cb:ae:ce:33:96:d3:26:d1:6e:
         48:77:43:e3:8a:40:dd:d7:d0:75:50:73:cf:04:da:3a:c4:12:
         53:e8:8e:f8:5e:cd:93:4e:aa:c4:82:3b:f8:3e:d3:cd:5c:13:
         15:f5:52:ef:20:df:d9:3d:cb:9d:9a:dd:4a:97:9a:77:78:7b:
         96:2a:4a:ce:2f:42:a6:0d:b1:57:7a:9f:c5:12:35:b9:86:2f:
         ad:1f:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:10:21 2026 by rpki-client